Design and monitoring of a secure network infrastructure for small educational institutions

Zakhar Sergeev

Bakalářská práce

Abstract:

This bachelor thesis focuses on the design and monitoring of a secure network infrastructure for a small educational institution with up to 100 devices. The work is based on the assumption that such an environment requires not only reliable connectivity, but also clear traffic separation, baseline security controls, and practical traffic visibility. The theoretical part of the thesis examines network requirements of small educational institutions, principles of campus network design, VLAN-based segmentation, access control, monitoring approaches, and the STRIDE threat model. These theoretical foundations are used as the basis for the practical design and later validation of a segmented network model implemented in a virtual environment. The thesis aims to formulate a realistic and manageable solution suitable for institutions with limited technical and financial resources.

Keywords

network design, VLAN segmentation, cybersecurity, Packet Tracer, Wireshark, educational networks, STRIDE, ntopng

Jazyk práce: angličtina

Datum vytvoření / odevzdání či podání práce: 19. 3. 2026

Obhajoba závěrečné práce

• Obhajoba proběhla 25. 5. 2026
• Vedoucí: Ing. Tomáš Vokoun
• Oponent: Pavel Ambruz, Ing.

Česká zemědělská univerzita v Praze

Provozně ekonomická fakulta

Bakalářský studijní program:
Informatics